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Claims 

What is claimed is: 

, A method for providing enhanced privacy in an RFID system compnsmg a plummy 
of MID devices, each having an associated identifier, and a. leas, one reader whtch 
communicates with one or more of the devices, the method comprising the steps of: 

receiving in a blocker device a communication directed from the reader to one or 

more of the RFID devices; and 

generating in the blocker device an output transmittable to the reader, the output 
simulating one or more responses from a, leas, one of the RF,D devices in a manner whtch 
prevents the reader from determining a, leas, a portion of the identifier of a, leas, one of the 
RFID devices. 

2. The method of claim 1 wherein the blocker device comprises one of the RFID 
devices. 

3 The method of claim 1 wherein the output ttansmittable to the reader is generated in 
«. blocker device based a, leas, in part on information in the received communicatton. 

4. The method of claim 1 wherein the output simulates responses from multiple ones of 
the RFID devices. 

5 The method of claim 1 wherein the blocker device generates the output in such a 
manner that the reader is prevented from determining identifiers for only those of the RFID 
devices having identifiers within a designated privacy zone. 

6 The method of claim 5 wherein a. leas, one of the RFID devices has an identifier 
w „ich is modifiable such that the identifier is transferable fiom outside the privacy zone ,„ 
within the privacy zone upon the occurrence of a specified event. 
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7 The method of claim 5 wherein at least one of the RFID devices has an identifier 
which is modifiable such that the identifier is transferable from within the privacy zone to 
outside the privacy zone upon the occurrence of a specified event. 

8. The method of claim 1 wherein the reader utilizes a singulation algorithm to 
determine the identifiers of the RFID devices. 

9. The method of claim 8 wherein the singulation algorithm comprises a tree-walking 
singulation algorithm. 

10 The method of claim 9 wherein the communication from the reader comprises a 
query specifying at least a subset of the identifiers, and further wherein the blocker device first 
determines if any of the identifiers in the subset are within a designated privacy zone, and if so 
generates the output simulating one or more responses from at least one of the RFID devices. 

11. The method of claim 9 wherein the output simulating one or more responses from at 
least one of the RFID devices comprises a broadcast of a signal representing the presence of 
RFID device identifiers at least one of which carries a '0' bit in a given position and at least one 
of which carries a ' 1 ' bit in the same position. 

12. The method of claim 8 wherein the singulation algorithm comprises an ALOHA 
singulation algorithm. 

13 The method of claim 12 wherein the communication from the reader comprises a 
25 query involving a selection set specification, and further wherein the blocker device first 
determines if an identifier in a designated privacy zone has at least a portion thereof 
corresponding to the selection set specification, and if so generates the output simulating one or 
more responses from at least one of the RFID devices. 
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14 The method of claim 12 wherein a privacy zone P is specified in terms of a set of 
arbrhary-.ength prefixes Z- <«. a, ... , *}. and wherein the Mocker device generates the 
output on,y if a selection mask a specified hy the reader is snch that a, is a prefix of a or v.ce 



versa. 



15 The method of claim 12 wherein the communication from the reader comprrses a 
communication debating a particular time slot, and former wherein the blocker device firs, 
determines if mere exists an identifier in a designated pnvacy zone such mat a functton of 
identifier evaluates to the particular time s,o, and if so generates the output smnda.mg one or 
m ore responses from at leas, one of the RFID devices within the particular tune slot. 

,6 The method of claim 15 wherein the generated output simulates collisions in every 
toe slot ,' for which . =/<*, T. where/,s the fimction, * denotes a random or psendorandom 
value, T denotes an identifier in a privacy zone P, and S denotes a slot allocation of the ALOHA 
singulation algorithm. 

17 The method of claim 1 wherein the blocker device comprises a full blocker tag and 
the generated output simulates all possible identified for a given set of RFID devrces. 

,8 The method of claim 1 wherein the blocker device comprises a selective blocker tag 
and the generated output simulates responses of only a subset of all possible idennfiers for a 
given set of RFID devices. 

,9 The method of claim 1 wherein the blocker device communicates to the reader 
information specifying a particular subset of a given set of RFID devices for which the reader 
will be unable to singulate identifiers. 
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20 The method of data. 1 wherein .he bloeke, device is configured to communicate to 
to reader information specifying a particular selective blocking policy being implemented by 
the blocker device. 

21 The method of claim 20 wherein the system supports a number of virtual identifiers 

denoted t, 1 < + K each corresponding to one of a plurality of selective blocking pohctes 

0 1 k and further wherein the blocker device communicates to the reader that ,t ts 
implementing a particular selecttve blocking policy i by gencrattng the output so as to stmufate a 
response from an RFfD device having identifier / + i. 

22 The method of claim 20 wherein a designated prefix <r« is utilized to identify any of 
te devices configured to implement a selective blocking policy, the reader determintng any 
devices so configured by issutng a query having a selection mask correspond to the 
designated prefix a*. 

23 The method of claim 20 wherein the blocker device has an identifier of the form T, = 
a. I pi | P, where I denotes string concatenation, A denotes a random value spectfic to the 
blocke. device, and P, denotes the selective blocking po.icy implemented by the blocker devtce. 

24 The method of claim 1 wherein the reader is operative to detect the presence of the 
Mocker device, and to determine tf the blocker device ts operating as a selective b.ocker devtce 
or a full blocker device. 

25 The method of claim 1 wherein the reader is operative to detect the presence of the 
blocker device by determining if a number of perceived RFiD devtce identifiers exceeds a 
specified threshold. 

26 The method of claim 1 wherein the reader is operative to detect the presence of the 
blocker device by accessing a database listing valid identifiers in a given range of RFID devtce 
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iden.if.ers, and determining .ha. the blocker device is presen. npon de.ec.ion of an RFID device 
having an identifier not in die database of valid identifiers. 

27 The method of claim 1 wherein the reader is operative .0 de.ec. .he presence of the 
blocker device by interacting with one or more odrer readers .0 determine information spemfymg 
the physical .cations of a. least a snbse. of ft. RFID devices, and processing .he de.erm.ned 
location information to ascertain if the blocker device is present. 

28. The method of claim 1 wherein .he bloeker device is configurable such .hat a privacy 
policy implemented by .he blocker device is selectable responsive .0 a command. 

29 An apparatus for providing enhanced privacy in an RFID system, the system 
comprising a plurality of RFID devices, each having an associated identifier, and a, leas, one 
reader which communicates with one or more of the devices, the apparatus compnsmg. 

a bloeker device operative to receive a communication directed from the reader to 
one or more of the RFID devices, and .0 generate an output transmittable .0 .he reader, the 
output simulating one or more responses from a, leas, one of the RFID devices in a manner 
which prevents the reader from determining a. least a portion of.be identifier of a. leas, one of 
the RFID devices. 

30. An RFID system comprising: 

a plurality of RFID devices, each having an associated identifier; and 
at least one reader which communicates with one or more of the devices; 
wherein a blocker device is operative to receive a communication directed from 
the reader to one or more of the RFID devices, and to generate an output transmittable to the 
reader, the output simulating one or more responses from at least one of the RFID dev.es in a 
manner which prevents the reader from determining at least a portion of the identifier of at least 
one of the RFID devices. 
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31. An apparatus for providing enhanced privacy in an RFID system, the system 
comprising a plurality of RFID devices, each having an associated identifier, the apparatus 
comprising: 

at least one reader which communicates with one or more of the devices; 
wherein a blocker device of the system is operative to receive a communication 
directed from the reader to one or more of the RFID devices, and to generate an output 

transmittable to the reader; 

wherein the reader is configured to receive from the blocker device information 
specifying a particular selective blocking policy being implemented by the blocker device. 
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